CVE-2018-1265: Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin…

PriorityP343high7.2CVSS 3.0

AVNACLPRHUINSUCHIHAH

EPSS

1.77%

75.4th percentile

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cloud_foundry	diego	>= unspecified < 2.8.0	2.8.0
cloudfoundry	cf-deployment	< 1.37.0	1.37.0
pivotal_software	cloud_foundry_diego	< 2.8.0	2.8.0

CVSS provenance

nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.